Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
File:                     1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json)
Hash identifier:          5ETJunJgCgHIzkjNMBBMWvcuCB2Jmv4OwwIbnsSZ/FA=
Subject key identifier:   08:F3:2D:F5:E5:5D:AE:15:D1:0D:4A:39:A0:EC:3C:B9:69:EB:F5:83
Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Certificate issuer:       /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
Manifest number:          0257
Signing time:             Tue 12 May 2026 15:53:45 +0000
Manifest this update:     Tue 12 May 2026 15:53:45 +0000
Manifest next update:     Tue 19 May 2026 15:53:45 +0000
Files and hashes:         1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: jhotEBwZ2syjNpgLMXc6nyb4rAlQv7IqWOQuOIDt82k=)
                          2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: JNyU8R5c8QL0IEETvSkoNrLyRGc2x887+ZYrTw2mI3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
        Validity
            Not Before: May 12 15:53:45 2026 GMT
            Not After : May 19 15:53:45 2026 GMT
        Subject: CN=6a034d09-2f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:50:65:73:e3:dc:ac:91:00:d2:ba:65:dd:a4:
                    1b:93:0b:9e:6a:95:2b:88:65:46:f5:ac:ee:28:2b:
                    3d:bb:64:9d:66:94:2b:02:f0:84:41:63:eb:5c:66:
                    50:27:45:a0:aa:74:cd:70:40:71:9d:1c:c2:ae:43:
                    f2:0b:7a:2d:f3:80:7a:c5:bc:b5:6a:be:c9:8d:ad:
                    f5:c0:15:c6:17:c3:c0:af:54:19:d7:c7:4f:8a:94:
                    01:00:78:9a:66:2d:9c:4f:6f:cc:2f:4e:fd:33:e3:
                    e8:0f:b5:22:d7:dd:7a:cb:64:9a:36:02:39:d7:17:
                    75:d3:1a:42:7c:16:64:16:4c:bd:6f:9c:6b:3c:49:
                    5e:b9:39:8f:45:02:6d:51:91:07:fc:e5:67:e1:e2:
                    7d:58:1c:32:15:db:32:4e:ad:dd:ea:68:16:3c:36:
                    c0:79:c8:eb:2f:34:5e:26:55:b8:4d:ed:87:b4:59:
                    43:27:29:f0:58:70:04:62:8d:bb:e0:a0:f6:22:32:
                    17:18:03:75:9f:e2:6f:0f:53:1b:9f:87:d4:8a:4a:
                    11:2f:54:69:f3:ee:7f:e5:39:c8:ca:90:56:28:20:
                    ee:6a:fc:e0:69:e0:7c:a2:ac:e5:66:fe:11:14:3e:
                    09:03:b6:5c:62:93:98:6a:ff:6e:0d:79:96:67:d1:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F3:2D:F5:E5:5D:AE:15:D1:0D:4A:39:A0:EC:3C:B9:69:EB:F5:83
            X509v3 Authority Key Identifier:
                keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:b1:c1:f0:39:6d:4a:b0:7d:e2:b1:53:79:ad:ce:06:e5:
         0c:d9:5e:dd:77:cb:d8:23:ec:9d:5e:72:bc:c3:53:5d:e7:c9:
         32:24:4d:e7:85:8b:66:64:36:4b:d9:6c:d2:67:1e:be:a5:18:
         d0:d0:ee:bd:a5:91:13:0d:a5:c3:66:c3:7b:80:3d:98:2d:35:
         ec:4e:38:38:5f:04:42:98:ec:27:75:7f:2b:bc:f8:9c:ec:fb:
         10:c0:7e:c5:ef:3c:d3:10:0e:bd:12:07:81:9b:9c:39:ea:6b:
         1e:1e:97:89:1c:dd:f6:85:8a:4f:f3:03:58:95:74:33:d7:1c:
         15:53:14:12:50:a6:04:08:e5:21:4a:b2:9a:21:33:d9:d2:98:
         39:15:ed:75:40:a2:94:92:6f:2e:51:08:f7:13:da:4d:7b:b1:
         9f:1f:4c:1b:5c:99:47:1e:b8:6b:7c:8d:66:cf:c8:42:b4:f1:
         98:21:31:71:f5:28:64:b1:ab:71:7b:65:01:46:6f:87:2a:82:
         e5:13:20:f7:14:39:8f:39:6d:8c:7f:61:c6:68:cf:02:a6:9f:
         3d:41:44:2b:f0:d2:71:8a:e2:c6:2a:1e:4b:05:f8:f3:7e:48:
         86:9d:18:09:e6:f4:24:a0:b1:c3:cb:b8:de:f7:70:4d:8f:79:
         82:11:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:54 2026 by rpki-client